What are CloudForge Delivery Workspaces?

CloudForge Delivery Workspaces help teams move from a requirement or Designer diagram into reviewable architecture, engineering, and DevOps artefacts. The Architect Workspace creates clarification questions, impact analysis, ADRs, risks, Mermaid diagrams, and delivery backlog items. Engineering and DevOps workspaces prepare implementation and release readiness.

How do Designer diagrams connect to CloudForge Workspaces?

Designer remains the visual source of truth for cloud architecture diagrams. Workspaces explain and prepare the delivery work around that design: Architect Workspace turns requirements into architecture packs and diagrams, Engineering Workspace turns approved architecture into implementation tasks, and DevOps Workspace turns the design into deployment readiness.

CloudForge is a visual cloud infrastructure designer for Azure, AWS, and GCP. You can drag-and-drop cloud resources, pull live Azure and AWS inventories, or describe your architecture in plain English and the AI will generate the diagram. It then produces production-ready Terraform, Pulumi, ARM templates, Bicep, or CloudFormation code automatically.

Does CloudForge have a free trial?

Yes. CloudForge has a trial for evaluation. Paid plans unlock production workflows such as Azure and AWS live resource import, team governance, Terraform and Pulumi generation, drift checks, and priority support.

Which cloud providers does CloudForge support?

CloudForge supports Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP) with 100+ resources for each provider. You can design multi-cloud and hybrid architectures in a single interface.

Can CloudForge generate Terraform code automatically?

Yes. CloudForge generates production-ready Terraform code directly from your visual diagrams. It also supports ARM templates, Bicep, and CloudFormation. The generated code follows cloud provider best practices and is ready to deploy.

Does CloudForge have an AI architecture designer?

Yes. The AI Architect lets you describe your infrastructure in plain English (e.g. "a highly available 3-tier web app on Azure with a PostgreSQL database and Redis cache") and instantly generates the full architecture diagram with proper resources, connections, and Terraform code.

Do I need my own API key to use CloudForge AI?

No. CloudForge includes managed AI powered by Anthropic Claude on AWS Bedrock, so you do not need to bring your own API key. AI usage is credit-metered and included with your plan, and you can use the AI Architect, code generation, and self-healing Terraform out of the box.

What is CloudForge Holographic Review Mode?

Holographic Review Mode is an immersive 3D "solar-system" view of your cloud architecture, where resources orbit as an interactive holographic scene. It is designed for stakeholder presentations and design walkthroughs, letting teams explore and review an architecture in three dimensions.

Does CloudForge have a desktop app?

Yes. CloudForge offers a native Windows desktop app (Windows 10/11 x64). Download the zip, extract it, and run CloudForge.exe. A macOS and Linux version are coming soon.

Can I import existing Terraform files into CloudForge?

Yes. CloudForge can parse your existing .tf Terraform files and automatically generate a visual architecture diagram from them. You can then edit the diagram and regenerate the Terraform code.

Is CloudForge a good Cloudcraft alternative?

Yes. CloudForge is a Cloudcraft alternative with AI-powered architecture generation, Terraform and Pulumi export, multi-cloud support for Azure/AWS/GCP, live resource import, and a native Windows desktop app.

Templates/Landing Zone Network Foundation

Google Cloud

Networking

advanced

Landing Zone Network Foundation — Google Cloud Architecture Template

An enterprise landing zone: shared VPC, protected ingress with Cloud Armor, controlled egress via NAT, CMEK, and organization-wide log sinks.

Why this architecture works

A shared VPC foundation gives central network control while projects stay autonomous.
All ingress passes the load balancer and Cloud Armor; no workload gets a public IP.
Org-level log sinks centralize audit trails before individual teams can alter them.
CMEK with Cloud KMS satisfies key-ownership requirements from day one.
Baseline IAM guardrails prevent privilege sprawl as new workloads onboard.

What's inside (10 resources)

Cloud DNS

gcp-cloud-dns

Cloud Armor

gcp-armor

Ingress LB

gcp-cloud-load-balancing

Shared VPC

gcp-vpc

Egress NAT

gcp-cloud-nat

Workload Subnet

gcp-compute-engine

IAM Guardrails

gcp-iam

CMEK Keys

gcp-kms

Org Log Sink

gcp-logging

Cloud Monitoring

gcp-monitoring

From template to running infrastructure

Open this template in the CloudForge visual designer (free account, no credit card).
Customize resources, names, and connections on the drag-and-drop canvas — or ask Vani, the AI architect, to adapt it.
Generate production-ready Terraform or Pulumi in one click.
Review the plan diff and security scan, then deploy with human approval.

Related architecture templates

Shared VPC Hub-and-Spoke

Google Cloud · Networking

Hybrid Connectivity via HA VPN

Google Cloud · Networking

Private Service Access

Google Cloud · Networking

Hub-Spoke with Transit Gateway

AWS · Networking